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ADMINISTRATION 



Classification: 

©Unclassified Oconfidential O Secret 
Dissemination controls: 

□ nOFORnDoRCOnDfOUoDpROPIN □LEsDRELIDoDFISAnFGlDRELTO 

D Edit Classification Text 
UNCLASSIFIED 



Restrict Document Permissions 

Restricting the document permissions means that only the users listed on this form as the Supervisor, the Investigator, or those added 
through the SIM or Disseminate To features will be able to open and read this FD-71, Additional users may be granted access as 
appropriate by using the form's Disseminate to Others field, though they may not be notified automatically. 

Unrestricted 



RECEIVED BY 



Name Q 



}DE) (FBI) 



Enter the last name, first name, and click the Search button. 



Email 



gtfbi.sgov.gov 



Originator Type: 
Complainant 



Status: 
Pending 



Priority: 

Routine 



Counter-terrorism, Domestic Terrorism, Cyber Terrorism, and WMD 
Incident Types must be reported through Guardian, and not this form. 



Incident Type: 
Criminal Activity 



Received On: 
6/7/2011 



Receipt Method: 
Telephone 



Last Updated: 
6/7/2011 



Originating Agency: 
FBI 



Responsible Office (Show Legats? O) 
Detroit 



Originator Telephone: 

I I 



RA: 

BCRA 



Responsible Squad (ACS Designation): 
C-16 



he 

hlC 



Is this Assessment a spinoff from a Type 3-6 Assessment, or an existing predicated investigation? 
No 



RESPONSIBLE INVESTIGATOR 



Name 



J(DE)(FBI) 



Enter the last name, first name, and click the Search button 



Email 



Jlfbi.: 



sgov.gov 



RESPONSIBLE SUPERVISOR 



Name (DE) (FBI) 

Enter the last name, first name, and click the Search button. 
Email l fr fbi.sqov.gov 

RESPONSIBLE SUPERVISOR 



Name | 



3 (">e> 



Enter the last name, first name, and click the Search button. 



Email 



J>fbi. sgov.gov 



he 

hlC 



SUMMARY 



Synopsis of Complaint: 

Complainant called to report child pornography. 



SENSITIVE INVESTIGATIVE MATTER 

A "Sensitive Investigative Matter" (SIM) relates to investigative activities where the nature of the person or 
group being assessed should be brought to the attention of FBI Headquarters and other DOJ officials. CDC 
review and SAC approval is required for all SIMs. Use the checkbox below to signify that this assessment is a 
SIM. Once the box is checked, follow the prompts on the form to provide additional details regarding the SIM, 
[3 Sensitive Investigative Matter 



Details of the Complaint: 
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Complainant | | tELEPHONe | | called the FBI Detroit Division to report the following information: ^ 

C stated that he utilizes a software program named the 'TOR NETWORK" in order to browse the internet anonymously. C stated that the Tor hlC 
Network works differently from internet web browsers; users are also able to view websites only available on the Tor Network. When • 
browsing the Tor Network on 6/07/2011, C clicked on a link titled TSC HAN. Upon viewing the link, C stated that it was a child pornography D ^ 

website. C gave the URL for the website as: | I 

C stated that the website was not viewable through normal web browsers (such as Safari, IE, or firefox) and that the site and it's contents 
could only be viewed on the Tor Network. 



Occurrence(s): 




Time: 




From: 


To: 


Duration: 


Duration Units: 



COMPLAINANT 



, tamp'?'"! Reived By: 



Date of Complaint: 



Time of Complaint: 



he 

hlC 



Name: 



Address: 



Gender: 

□ Protect Identit * Male (M) 



Date of Birth : 



Email Address: 



SUBJECT 



Last Name or Organization Name: 


First Name: 


Middle Initial: 


Social Security Number: 


Date of Birth: 


Place of Birth: 


Phone Type: Phone Number 


Gender: 


Build: 


Complexion: 


Hair Color: 


Eye Color: 


Feet: Inches: 

Height: 


Weight: 


Age: 


Facial Hair: 


Accent: 


Race: 


Driver's License Number: 


O Yes 
US Person O No 

© Unknown 





Description (dress, mannerisms, or statements made): 



Address: 



Other Names: 



Other Addresses: 
Scar(s)/Tattoo(s): 

Scar/Tattoo Description: 



Associate(s); 
Weapon (s): 

Weapon Description: 



Vehicle(s): 



INVESTIGATIVE METHODS 

If an Investigator has been assigned to conduct an assessment, all investigative methods used during this 
assessment must be reported on the form. The Add Method button can be used to create additional Method 

sections as needed. The Method Explanation field should be used to describe the results of each individual 

method employed. Once the assessment has been completed/ the Findings section can be used to report overall 



b7E 

10/26/2011 
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results and recommendations to the Supervisor. 

Method options: Access/examine FBI/ DO J records, and obtain information from FBI/POJ personnel 

Selected Method: 

Access and examine FBI and other DOJ records, and obtain information from any FBI or DOJ personnel. No approval required. Note: 
This includes ACS and NCIC checks. 



Method Explanation: 

Checks in ACS forQ 



^negative. Checks in ACS for C negative. 



b7E 



]can be viewed by changing the URL to: 



Writer has not 



viewed the website, but a search for the Tor Network on http://www.google.com revealed tor websites are 
viewable on internet web browsers by switching ".onion" to "tor2web.org". 



FINDINGS 



Recommended Classification: 
305 



Recommended Alpha: 
C 



PI Disseminate to FIG 



PI Disseminate to Others 



Recommended Action: 




Close Assessment, Upload to O-ASSESS File 




Date: 




8/2/2011 





interviewed complainant on 7/15/11. Complainant explained that he was using the 
Hppn wph Inratinn ral|pH the "silk road." He visited the TOR directory at the 

At this site, he noticed a link to "adult" websites and clicked 



Assessment Findinos^— 
Writer and TF( j 
TOR network tp Inok fnr.a 

following site: | 

on it. He noticed a link on the next page for "TSCHAN" which he recognized to be a hacking affiliated group. 
When he clicked on this link, he saw pictures he described as child pornography. He said it looked like child 
pornography because he could tell the subjects were very young with some in diapers. All were still images, 
no videos, and he said most showed the children posing for the pictures. 

Complainant brought in the computer he had used to access the site, but had "wiped" the hard drive after 
visiting that site. 

Complainant had no other information about who the subjects of the pictures were or who would have posted 
the pictures. Also, because everyone (all internet traffic) connected to the TOR network is anonymous, there 
is not currently a way to trace the origin of the website. As such no other investigative leads exist. 
Federal Violation: 

AUTHORIZED PURPOSE(S) AND OBJECTIVE(S) 

Assess whether sufficient evidence existed for case opening 



b6 
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SUPERVISOR REVIEW 



Responsible Supervisor: 
I tPE)(FBI) 



REVIEWS 



Period Start Date: 


Days: 


Supervisor Decision: 






Period End Date: 




Reassign to Supervisor 




he 

hlC 


DAdd Comments 




















(DE) (FBI) 




REVIEWS 


Period Start Date: 

7/6/2011 
Period End Date: 

8/5/2011 


Days: 
30 


Supervisor Decision: 
Start or Continue Assessment 







□Add 



Comments 



Period Start Date: Days: Supervisor Decision: 
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Period End Date: 



No Assessment, Upload to or Case File 



DAdd Comments 



Office (Show Legats? □): 


Classification: 


Alpha: 


File #: 


Sub File#: 


Case ID: 


Uploaded: 


Serial: 


Detroit 


305 


C 







DE 305C-0 


□ 





b6 
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415-0-ASSESS-I 



|Case ID: 

Author: 



| Uploaded: | Serial: | 



ACS now requires two CPI Codes when opening a case. One must be chosen in the National Threat Priority CPI Code field, and one from 
the CPI Code field. Additional CPI Codes can be added if desired in the CPI Code field. 



National Threat Priority CPI Code 



CPI Codes: 



ATTACHMENTS 


Upload to ACS 

j^f Description: 


Attachment: 






□ 


File Attachment 


Case ID: 


Serial Num: 


UNCLASSIFIED 
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